v40: Persist OAuth sessions to database

db.go

@@ -160,6 +160,25 @@ CREATE TABLE IF NOT EXISTS clicks (
 CREATE INDEX IF NOT EXISTS idx_clicks_short_code ON clicks(short_code);
 CREATE INDEX IF NOT EXISTS idx_clicks_clicked_at ON clicks(clicked_at DESC);
 
+-- OAuth sessions (persisted for login persistence across deploys)
+CREATE TABLE IF NOT EXISTS oauth_sessions (
+	id TEXT PRIMARY KEY,
+	did TEXT NOT NULL,
+	handle TEXT NOT NULL,
+	created_at TIMESTAMPTZ NOT NULL,
+	expires_at TIMESTAMPTZ NOT NULL,
+	access_token TEXT,
+	refresh_token TEXT,
+	token_expiry TIMESTAMPTZ,
+	dpop_private_jwk TEXT,
+	dpop_authserver_nonce TEXT,
+	dpop_pds_nonce TEXT,
+	pds_url TEXT,
+	authserver_iss TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_oauth_sessions_expires_at ON oauth_sessions(expires_at);
+
 -- Trigger to normalize feed URLs on insert/update (strips https://, http://, www.)
 CREATE OR REPLACE FUNCTION normalize_feed_url()
 RETURNS TRIGGER AS $$